Ankur Dubey

About Ankur Dubey

Seasoned IT Governance, Risk, and Compliance (GRC) and Information Security ProfessionalWith over 17 years of diverse experience, I have excelled in consulting, managing, auditing, and assessing Information Security and IT GRC functions across various industries, including Banking, Mobile Financial Services, Telecommunications, IT, FMCG, Pharma, Oil & Gas, BPO, Aviation, Automotive, and Manufacturing.Core Competencies- Security Governance and Operations:Led the definition and execution of security program roadmaps, including IT Risk Management, Regulatory Compliance, and Policy Development. Formulating strategies for program maturity and automation of security controls.Developed and maintained robust Security Governance frameworks, offering continuous feedback and recommendations for automating and enhancing compliance with internal and external standards- Team Leadership and Compliance Management:Currently managing a global team of 8 compliance and risk management professionals, overseeing cyber and regulatory compliance, risk assessment, policy creation, and audit facilitation- Regulatory Compliance Programs:Proven expertise in managing end-to-end IT SOX program, ensuring program maturity and timely resolution of audit deficiencies. Laying out guidelines for PCI DSS, DFARS and others- Standards and Framework Implementation:Successfully managed the implementation, audit, and enhancement of ISO 27001:2013 ISMS, NIST Security Framework, and ISO 22301:2012 BCMS for global clients- Consulting and Policy Development:Assisted clients, including PSU Banks and State Treasury Departments, in developing and maturing internal Infosec policies, plans, processes, procedures and controls framework- Internal Communication Strategies:Designed and implemented effective internal communication strategies to promote policies and procedures within organizations- Senior Management Partnership:Collaborated with senior leadership to manage security functions, including program maturity, process design, documentation, data privacy, and Business Continuity and Disaster Recovery (BC & DR)- Scrum Methodology and Tools: Certified SCRUM Master with hands-on experience enforcing scrum methodologies using tools such as JIRA, Confluence, and Power Automate- Pre-sales, Business Development, and RFP Responses:Actively engaged in pre-sales activities and RFP responses, using technical expertise to meet client needs and drive business development by identifying opportunities and shaping strategic approaches.

Experience

1. Global Lead Dt Audits and Compliance

   Carrier

   Oct 2024 — Present · Hyderabad, IN

   As the Global Lead for IT Audits and Compliance, I oversee a team of 25+ professionals across geographies to ensure compliance with regulatory, statutory, and internal standards across entities. I also manage our MSP partner team to ensure seamless operational delivery and maturity improvements across our compliance framework.Key Responsibilities:Lead the global DT Audits & Compliance function overseeing a team of professionals across multiple geographies, ensuring effective execution of audit and compliance initiatives for over 1900 applications spanning 250+ legal entities worldwide.Strategize and drive overall compliance improvement initiatives through the adoption of automation, analytics, and emerging AI technologies, enhancing efficiency, control effectiveness, and proactive risk detection across global IT environments.Manage regulatory and compliance deliverables across multiple frameworks and drive end-to-end program management and maturity of the IT SOX compliance program, including annual risk assessments, control scoping, design and operating effectiveness, and remediation tracking.Oversee continuous compliance monitoring and attestation processes, ensuring timely execution and evidence collection for ITGCs, automated controls, and application-level compliance requirements.Partner with Managed Service Provider (MSP) teams to execute operational activities and improve service delivery.Develop and implement global compliance governance frameworks, control ownership models, and risk mitigation strategies to improve audit readiness and reduce recurring issues.Collaborate cross-functionally with Internal Audit, Cybersecurity, Risk, IT Operations, and Application Owners to ensure proactive compliance posture and mitigate technology-related risks.Establish and track KPIs and compliance metrics via dashboards and reporting tools to provide transparency and drive continuous improvement.

Education

• Saraswati Higher Secondary School,Satna

  Intermediate

• Rajiv Gandhi Prodyogiki Vishwavidyalaya

  Bachelor of Engineering